Methods and systems for performing secure authenticated updates of authentication credentials
AssigneeGoogle Inc.
InventorsRyan James Harrison, Christopher Wolfe
Life of this patent
Estimating the term…
Abstract
A method of updating an authentication credential may include, by a client device, receiving an authentication credential from a user, generating an access key using the authentication credential, determining whether the access key decrypts a storage key that encrypts at least a portion of a computer-readable storage medium of the client device, and in response to determining that access key does not decrypt the storage key, sending a request to an authentication server. The request may include the authentication credential. The method may include receiving, from the authentication server, a recovery key, and generating an updated storage key using the decryption key.
Claims23
A method of updating an authentication credential, the method comprising:
- by one or more client devices, each associated with a user:
- receiving an authentication credential from the user;
- generating an access key that is derived from the authentication credential;
- determining whether the access key decrypts a storage key that encrypts at least a portion of a computer-readable storage medium of the client device;
- in response to determining that the access key decrypts the storage key:
- decrypting the storage key with the access key to create a decrypted storage key, and
- decrypting the at least a portion of the computer-readable storage medium of the client device with the decrypted storage key;
- and
- in response to determining that the access key does not decrypt the storage key:
- sending a request to an authentication server, wherein the request comprises the authentication credential;
- receiving, from the authentication server, a recovery key, and
- generating an updated storage key using the recovery key.
A method of updating an authentication credential, the method comprising, by an authentication server:
- receiving, during a first stage of a boot process, from a client device associated with a user, a request to verify an authentication credential of the user, wherein the request comprises:
- the authentication credential,
- a unique client device identifier associated with the client device, and
- a unique user identifier associated with the user;
- determining whether the authentication credential corresponds to the unique client device identifier and the unique user identifier by comparing the authentication credential, the unique client device identifier and the unique user identifier to information stored by the authentication server;
- and
- in response to determining that the authentication credential corresponds to the unique client device identifier and the unique user identifier, sending a key to the client device and one or more other client devices associated with the user.
(canceled)
A system of updating an authentication credential, the system comprising:
- a computing device;
- and
- a computer-readable storage medium in communication with the computing device, wherein the computer-readable storage medium comprises one or more instructions that, when executed, cause the computing device to:
- receive an authentication credential from a user,
- generate an access key that is derived from the authentication credential,
- determine whether the access key decrypts a storage key that encrypts at least a portion of the computer-readable storage medium,
- in response to determining that the access key decrypts the storage key:
- decrypt the storage key using the access key to create a decrypted storage key, and
- use the decrypted storage key to decrypt the at least a portion of the computer-readable storage medium of the client device;
- and
- in response to determining that access key does not decrypt the storage key:
- send a request to an authentication server, wherein the request comprises the authentication credential,
- receive, from the authentication server, a recovery key, and
- generate an updated storage key using the recovery key.
A system of updating an authentication credential, the system comprising:
- a computing device;
- a plurality of client devices in communication with the computing device, wherein each client device is associated with a user;
- a computer-readable storage medium in communication with the computing device, wherein the computer-readable storage medium comprises one or more instructions that, when executed, cause the computing device to:
- receive, during a first stage of a boot process, from one of the client devices, a request to verify an authentication credential of the user, wherein the request comprises:
- the authentication credential,
- a unique client device identifier associated with the client device, and
- a unique user identifier associated with the user;
- determine whether the authentication credential corresponds to the unique client device identifier and the unique user identifier, and
- in response to determining that the authentication credential corresponds to the unique client device identifier and the unique user identifier, sending a key to the plurality of client devices.
Dependencies are inferred from the claim text.